CVSS: 7.1EPSS: 0%CPEs: 21EXPL: 2CVE-2004-1714 – Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun
https://notcve.org/view.php?id=CVE-2004-1714
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule. • https://www.exploit-db.com/exploits/24362 http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html http://marc.info/?l=bugtraq&m=109223751031166&w=2 http://www.securityfocus.com/bid/10915 https://exchange.xforce.ibmcloud.com/vulnerabilities/16959 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 1CVE-2003-1527
https://notcve.org/view.php?id=CVE-2003-1527
BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. • http://online.securityfocus.com/archive/1/294411 http://www.iss.net/security_center/static/10314.php http://www.securityfocus.com/bid/5917 •